Update axios version to address vulnerability

Addresses vulnerability: An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.
bcgov · Dec 12, 2023 · bae821a · bae821a
1 parent 1927e00
commit bae821a
Show file tree

Hide file tree

Showing 2 changed files with 54 additions and 4 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -38,6 +38,7 @@
   },
   "overrides": {
     "async": "~2.6.4",
+    "axios": ">=1.6.0",
     "engine.io": ">=6.4.2",
     "getobject": ">=1.0.0",
     "shelljs": ">=0.8.5",